CVE-2026-113792 · GHSA-qfv9-64jg-mh7p
pypdf: Possible infinite loop in PdfWriter.find_outline_item
- Risk score
- 49/100
- CVSS
- 6.0 v4.0
- Exploit chance (30 days)
- 0.5%
- Published
- 21 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.
- Affected
- pypdf (pip) < 6.20.1
- Fix
- Upgrade pypdf to 6.20.1 or later.
- Exploitation
- No known exploitation
Story map
At a glance
pypdf: Amber, patch this week. pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF that repeatedly references the same nonexistent indirect object, causing relevant file parts such as pages to trigger repeated full-file recovery loads and long runtimes when accessed. This issue is fixed in version 6…
The flaws
- CVE-2026-113792: Possible infinite loop in PdfWriter.find_outline_item (CVSS 6.0 · EPSS 0%)
- CVE-2026-115572: Possible long runtimes for repeated references to the same missing object (CVSS 7.1 · EPSS 1%)
- CVE-2026-115585: Possible long runtimes for repeated malformed cross-reference entries (Follow-up) (CVSS 7.1 · EPSS 1%)
- CVE-2026-115580: Possible long runtimes for large xref table header limits (CVSS 7.1 · EPSS 1%)
The fix
Upgrade pypdf: 6.20.1 · 6.21.2 or later on your release line
Who is exposed: pypdf (pip) < 6.21.2
Where it stands
- No known exploitation
Connects to
- Same weakness: CWE-835 (CWE-835). 54 other warnings in 30 days
Why it is Yellow
- CVSS 6.0 medium
- On your watchlist: PyPI
Affected packages
| Package | Ecosystem | Vulnerable | Fixed in |
|---|---|---|---|
| pypdf | pip | < 6.20.1 | 6.20.1 |
References
- https://github.com/advisories/GHSA-qfv9-64jg-mh7p
- https://github.com/py-pdf/pypdf/security/advisories/GHSA-qfv9-64jg-mh7p
- https://github.com/py-pdf/pypdf/pull/4188
- https://github.com/py-pdf/pypdf/commit/c9c35b4471c2eb5fe078094f6c816e69d4ed25a0
- https://github.com/py-pdf/pypdf/releases/tag/6.20.1
- https://github.com/advisories/GHSA-qfv9-64jg-mh7p
Original description
pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite loop and block the current process. This issue is fixed in version 6.20.1.
Last activity 21 Oct 2026. Patch Forecast updates every hour.